bugtraq - Re: ASLR now built into Vista

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060526115353.2124EDA824@mailserver7.hushmail.com>
Date: Fri, 26 May 2006 21:53:52 +1000
From: <0x80@...h.ai>
To: <full-disclosure@...ts.grok.org.uk>, <bugtraq@...urityfocus.com>,
        <ntbugtraq@...tserv.ntbugtraq.com>, <davidl@...software.com>
Subject: Re: ASLR now built into Vista


So is this a paid Microsoft advertisment?

On Fri, 26 May 2006 13:22:49 +1000 David Litchfield 
<davidl@...software.com> wrote:
>Address Space Layout Randomization is now part of Vista as of beta 

>2 [1] . I 
>wrote about ASLR on the Windows platform back in September last 
>year [2] and 
>noted that unless you rebase the image exe then little (not none!) 

>is added. 
>ASLR in Vista solves this so remote exploitation of overflows has 
>just got a 
>lot harder. I've not done a thorough analysis yet but, all going 
>well, this 
>is a fantastic way for Microsoft to go and builds on the work done 

>with 
>NX/DEP and stack cookies/canaries.
>
>Cheers,
>David Litchfield
>
>[1] 
>http://msdn.microsoft.com/windowsvista/downloads/products/getthebet

>a/default.aspx
>[2] http://www.ngssoftware.com/papers/xpms.pdf
>
>
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/



Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/